diff --git a/system/containers.nix b/system/containers.nix
index dfa5bf0..c1f8a88 100644
--- a/system/containers.nix
+++ b/system/containers.nix
@@ -48,5 +48,9 @@
     programs.extra-container.enable = true;
 
     programs.firejail.enable = true;
+
+    virtualisation.libvirtd.enable = true;
+    environment.systemPackages = with pkgs; [ dnsmasq ];
+    networking.firewall.trustedInterfaces = [ "virbr0" ];
   };
 }
diff --git a/system/users.nix b/system/users.nix
index 4528a6a..c1a1039 100644
--- a/system/users.nix
+++ b/system/users.nix
@@ -20,6 +20,8 @@
       "corectrl"
       "vboxusers"
       "input"
+      "libvirtd"
+      "kvm"
     ];
     shell = pkgs.fish;
     openssh.authorizedKeys.keys = [